PT-2025-1628 · Tcas Ii · Tcas Ii

Alessio Merlo + 4 · Published 2025-01-22 · Updated 2025-07-25 · CVE-2024-11166

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F

Description The issue allows an attacker to impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a denial-of-service condition.

Recommendations For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, consider disabling the Comm-A Identity Request feature until a patch or update is available to prevent an attacker from setting the SLC to the lowest setting and disabling the RA. Restrict access to the system to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-15

Related Identifiers

CVE-2024-11166

Affected Products

Tcas Ii

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-11166 · Security Note
• https://twitter.com/midwestneil/status/1948753072521707664 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-021-01 · Note
• https://twitter.com/CVEnew/status/1882137383170416950 · Twitter Post
• https://t.me/cvedetector/16139 · Telegram Post